key chain warning The “System Roots” keychain cann

Question

Am landed with following error "“System Roots” keychain cannot be modified" when I double tap the certificate. After googling I come to know that drag and drop the certificate is the solution for this.

But even after doing this also in code it says "profile doesnt match vaild certificate/private key chain pair in the default key chain"

ANy Solution....

Thanks.

Answer 1

Quit keychain access and double-clicking the AppleWWDRCA.cer and developer_identity.cer it worked fine. It added them to the login keychain instead of attempting an add to system roots keychain.

Apple Discussion link: https://discussions.apple.com/thread/2343078

Answer 2

Step 1 - download your developer certificate and drop in into your DEFAULT keychain

step 2 - download apple WWDRCA certificate and drop into the same keychain.

step 3 - CHECK if there is a private key along with your certificate. (you should be able to see tiny triangle beside your certificate. Click on it to see if your private key is present or not)

step 4 - download the provisioning profile from the developer portal and drop into your xcode.

Try to do these things first. If you still get a error, then delete the extra apple certificates in your keychain and try the process once again.. it will do the trick...

Answer 3

In my case, I had to create a new .certSigningRequest file by following the steps here.

And Then I've to create the certs again with this new file.

Answer 4

Just try below three steps

Step 1: Open your Keychain Access app.
Step 2: You will see list in left side as 'Login' ,'System' and 'System Roots', just drag your certificate in 'Login' option.
Step 3: You will get certificate install successfully in Keychain Access.

Answer 5

The default keychain is the one that Keychain Access shows in boldface in the list of keychains. Usually, it's the "login" keychain. Open up the default keychain and look for your certificate. If you find it, make sure there's a little disclosure triangle to its left. Clicking on that triangle should reveal the private key. If you don't have all that, you won't be able to sign binaries.

Answer 6

---

I also faced this problem with the APNS certificate by double click on it getting the error but manually import certificate works for me.

---